Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a363536633a3a2f33322d3438203d3e20323639343839.roa
File:                     323830343a363536633a3a2f33322d3438203d3e20323639343839.roa (raw, json)
Hash identifier:          viHwdP9n7AGuOTeuOsGrqZZnl53CVTTtDuxL8WE4EEk=
Subject key identifier:   84:37:9E:CB:4D:6E:80:A2:98:18:3D:61:52:9C:70:C2:D9:18:34:E1
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       3E8BF6856CFCB92551A0AC1E9FC252DD4A9C4F96
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a363536633a3a2f33322d3438203d3e20323639343839.roa
Signing time:             Thu 04 Apr 2024 19:59:32 +0000
ROA not before:           Thu 04 Apr 2024 19:54:32 +0000
ROA not after:            Thu 03 Apr 2025 19:59:32 +0000
asID:                     269489
IP address blocks:        2804:656c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8b:f6:85:6c:fc:b9:25:51:a0:ac:1e:9f:c2:52:dd:4a:9c:4f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:32 2024 GMT
            Not After : Apr  3 19:59:32 2025 GMT
        Subject: CN=84379ECB4D6E80A298183D61529C70C2D91834E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:3a:fb:75:64:ca:13:ce:fc:8e:3e:24:25:
                    1b:c3:e0:c3:bc:eb:b5:c7:a7:c4:ba:ee:f5:4d:20:
                    9b:78:01:ba:46:3a:c9:d0:d7:08:7a:d6:6f:ff:d0:
                    56:77:72:f0:5b:42:64:24:a3:0b:52:d6:6a:f7:8a:
                    97:ad:ec:94:b1:f2:6c:32:d9:90:6d:25:37:95:bf:
                    e6:23:4c:d7:6b:35:e6:c0:1d:d1:77:3f:19:b0:c1:
                    38:e3:5a:a7:8f:ae:c0:24:a4:cb:6c:a6:e9:d5:3b:
                    67:ee:a5:68:95:55:3b:92:dc:41:5b:a9:23:c7:43:
                    04:73:c0:3d:6e:86:29:d5:f5:7c:d7:f3:be:c3:6c:
                    bd:90:22:4b:d2:45:b8:32:4c:6d:c9:b3:ac:46:cf:
                    b9:98:ef:8a:00:28:d9:2a:81:ad:31:43:c6:ce:c9:
                    8a:82:d4:47:79:69:89:2e:35:23:86:25:59:a5:c2:
                    8a:fa:b7:cc:95:08:8a:81:95:71:3c:b9:4f:e6:7f:
                    3d:4f:12:83:2c:63:9e:56:9f:ce:6f:e7:de:51:40:
                    fb:2a:47:02:d7:63:4e:46:51:73:aa:ea:2e:51:74:
                    9e:71:42:15:8a:81:de:44:e9:68:57:18:99:9b:d1:
                    c9:63:b8:66:ae:cc:6d:a8:49:8b:00:71:51:a6:d8:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:9E:CB:4D:6E:80:A2:98:18:3D:61:52:9C:70:C2:D9:18:34:E1
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a363536633a3a2f33322d3438203d3e20323639343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:656c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:29:0b:36:80:11:4e:9e:d5:2b:1c:5d:10:37:0b:c5:90:
         eb:dc:a8:a0:92:68:b1:bd:04:5c:fb:8e:2a:79:3a:66:43:dd:
         0f:f7:a8:f2:87:db:0b:19:ba:be:0b:f5:c9:6c:83:89:e3:11:
         da:82:4e:42:3b:f7:2c:c7:9a:e6:7b:ec:bd:55:c7:42:ba:cf:
         5c:9a:86:ec:7f:cf:1d:df:be:7a:31:9f:d4:a1:9c:23:cf:1a:
         10:f7:ec:5d:6c:0e:26:6d:56:ac:0e:6d:af:91:e8:17:81:ac:
         73:cc:d3:01:45:ae:11:8d:97:d7:8b:e0:03:98:2c:1e:b1:83:
         31:20:b6:8e:cd:e8:e0:79:80:fa:be:09:59:4d:60:ac:5f:ad:
         19:14:41:28:23:40:78:3b:e8:9f:6c:6a:98:23:a7:ee:54:91:
         4c:7b:07:f0:82:76:d4:df:42:36:7c:af:37:7a:71:bf:66:07:
         b6:a8:4b:d6:61:0e:65:ee:b5:97:a1:58:86:31:68:48:b6:21:
         c5:fb:69:d4:a2:04:d6:56:bd:02:02:44:61:d6:6a:cb:83:c3:
         13:a8:4e:ab:f7:96:26:2e:eb:46:c9:7d:3a:c1:8c:43:0d:5c:
         ff:37:38:56:e4:01:00:6c:5b:51:d0:3a:e6:e3:15:5a:b1:91:
         c0:0c:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org